Table of Contents
Advertisement
4.6 Network Descriptor
What is ...
How is it used
In this section
E-DOC-CTC-20051017-0169 v0.1
The concept of Network Descriptors is introduced for the first time in the
SpeedTouch™ R5.3.0. Not only the classical idea of an IP network or subnet is
comprised in this concept, but also the protocol and port number of the messages
can be specified, such that access to the VPN can be restricted to certain hosts,
protocols and port numbers.
Both the origin and destination traffic policies are expressed by referring to a
Network Descriptor. To this end, a symbolic name is attributed to a Network
Descriptor.
The definition of relevant Network Descriptors is linked with the topology of the
VPN that is constructed with the IPSec configuration. The Network Descriptors
determine the type of messages that will trigger the IPSec module.
The Network Descriptor parameters are explained in section 4.6.1.
Network Descriptors can be used to express the origin and destination networks for
an IPSec Connection. In case a
private networks are described by referring to a Network Descriptor. In this case,
relevant Network Descriptors have to be created prior to the definition of a
Connection. The Connection refers to the Network Descriptors by their symbolic
name.
The following topics are discussed in this section:
4.6.1 Network Descriptor Parameters
4.6.2 Create a New Network Descriptor
4.6.3 Set the Network Descriptor Parameters
4.6.4 Delete a Network Descriptor
Configuration via the Command Line Interface
static
IPSec policy is used, the local and remote
Topic
Chapter 4
Page
136
138
139
140
135
Advertisement
Table of Contents
